Legal

Privacy Policy

Last updated: 4 September 2026

1. Who We Are

Elite11Plus is operated by Riedec Intelligence FZCO, Level 19, Sheikh Rashid Work Hub Sheikh Rashid Tower, Plot No. 3360301, DM Building Number 14 Dubai World Trade Center Complex, Dubai, United Arab Emirates. We are the data controller for personal data processed through our services.

You can contact us about privacy, account deletion, or data requests at office@elite11plus.ai or through the contact form on our website.

2. What Personal Data We Collect

We collect different categories of personal data depending on your relationship with us:

2.1 Account & Contact Data

  • Name, email address, phone number
  • Job title and organisation name
  • Login credentials (encrypted)
  • Billing and payment information

2.2 Player Performance Data

  • Player names, dates of birth, positions
  • Test results (sprint times, agility scores, technical skill ratings)
  • Progress tracking data across sessions and seasons
  • Photos or videos uploaded by the club (if applicable)

2.3 Automatically Collected Data

  • IP address, browser type, device information
  • Usage data (pages visited, features used, session duration)
  • Cookies and similar tracking technologies (see Section 10)

2.4 Health and Fitness Data

  • If you choose to connect Apple Health, Apple Watch, or Google Health Connect, we request access only to health and fitness data needed for Elite11Plus health, readiness, training load, recovery, injury risk, and trend features.
  • Health data we may access, collect, and process includes step count and related activity metrics, workouts/exercise sessions, heart rate, resting heart rate, heart rate variability, heart rate recovery, sleep duration and sleep stages, VO2 max, blood pressure (systolic and diastolic), oxygen saturation, respiratory rate, body temperature or wrist temperature, active energy, and basal energy.
  • We collect this data only after you grant permission through Apple Health or Health Connect. You can choose which data types to allow, and you can revoke access at any time in your device health permissions or app settings.

2.5 Photos, Videos, Camera Recordings and Uploaded Content

  • If you use profile, training, drill analysis, chat, team, scouting, or club features, we may collect photos, videos, camera recordings, uploaded media, thumbnails, analysis results, annotations, and related metadata that you or your organisation provide.
  • We use this content to create player profiles, run football performance analysis, provide coach feedback, support team/scouting workflows, and operate messaging or sharing features selected by the user.

2.6 Location Data

  • We may collect approximate or precise location data when you allow location access, enter regional information, search for clubs or players by region, use location-based discovery, or submit profile/team/club details.
  • We use location data to provide regional training insights, country or federation context, club discovery, scout search, team administration, fraud prevention, and service security.

3. How We Use Your Personal Data

We process personal data for the following purposes and legal bases under GDPR Article 6:

Purpose
Legal Basis
Providing the Elite11Plus platform and services
Performance of a contract (Art. 6(1)(b))
Processing player performance tests and generating reports
Legitimate interest (Art. 6(1)(f)) / Club's legal obligation
Account management and authentication
Performance of a contract (Art. 6(1)(b))
Customer support and responding to enquiries
Legitimate interest (Art. 6(1)(f))
Service improvements, analytics and platform security
Legitimate interest (Art. 6(1)(f))
Marketing communications (with your consent)
Consent (Art. 6(1)(a))
Legal compliance and dispute resolution
Legal obligation (Art. 6(1)(c))
Syncing and processing Health Data from Apple Health, Apple Watch, or Google Health Connect to provide health scores, training load analysis, readiness/recovery insights, systemic stress trends, sleep recovery, injury risk indicators, charts, and personalized football performance insights
Explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)) / performance of requested app features
Processing photos, videos, uploaded content, camera recordings, location data, and related analysis metadata to provide player profiles, drill analysis, coaching feedback, team administration, club discovery, scout search, and regional insights
Performance of a contract (Art. 6(1)(b)) / legitimate interest (Art. 6(1)(f)) / consent where required

4. Who We Share Data With

We do not sell personal data. We only share data in the following circumstances:

  • Within your organisation: Coaches, analysts and administrators within your club or academy can access player data you authorise them to see.
  • Health Data: We do not sell Health Data and do not use it for advertising, credit, insurance, employment, or eligibility decisions. We share Health Data only with service providers needed to operate the app, or with coaches, clubs, scouts, sports scientists, or organisation users when you actively use a sharing/request feature, grant the required app permissions, or where disclosure is required by law.
  • Service providers: We use trusted third-party providers for hosting and infrastructure, payment processing, email delivery, analytics and app operations. These providers are bound by data processing agreements or equivalent contractual safeguards.
  • Location data: Club search uses geocoding data from GeoNames, licensed under CC-BY 4.0.
  • Legal requirements: We may disclose data if required by law, court order or regulatory authority.
  • Business transfers: In the event of a merger, acquisition or asset sale, data may be transferred subject to the same privacy protections.

5. International Data Transfers

Elite11Plus is operated from the United Arab Emirates. Our hosting, infrastructure, and service providers may process personal data in the UAE, UK, EEA, United States, or other countries where our providers operate.

If we transfer personal data internationally, we ensure appropriate protection through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • UK International Data Transfer Agreements (IDTAs)
  • Adequacy decisions for recognised countries

6. How Long We Keep Your Data

We retain personal data only as long as necessary for the purposes outlined above:

Data Type
Retention Period
Account and contact data
Until account closure + 6 years for legal obligations
Player performance data
Controlled by the club — deleted upon club request or account termination
Health and fitness data from Apple Health, Apple Watch, or Google Health Connect
Kept while your account is active or until you revoke health permissions, disconnect the integration, request deletion, or delete your account, unless a longer period is required by law
Photos, videos, uploaded content, location data, and analysis metadata
Kept while your account or organisation workspace is active, until deleted by you or your organisation, or until account deletion, unless a longer period is required for legal, security, billing, or dispute-resolution purposes
Payment and billing records
6 years where required for tax, accounting, or legal obligations
Marketing consent records
Until consent is withdrawn + 2 years
Server logs and analytics
12 months

7. Data Security

We implement appropriate technical and organisational measures to protect personal data:

  • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Access controls: Role-based permissions — clubs control who sees what data
  • Regular security audits: Penetration testing and vulnerability assessments
  • Incident response: Breach notification procedures compliant with GDPR Article 33/34
  • Staff training: All personnel with data access receive data protection training

8. Your Data Protection Rights

Under GDPR and the UK Data Protection Act 2018, you have the following rights:

Right of Access (Art. 15)
Request a copy of the personal data we hold about you.
Right to Rectification (Art. 16)
Request correction of inaccurate or incomplete data.
Right to Erasure — "Right to be Forgotten" (Art. 17)
Request deletion of your personal data where there is no overriding legal reason for us to keep it.
Right to Restrict Processing (Art. 18)
Request that we limit how we use your data in certain circumstances.
Right to Data Portability (Art. 20)
Receive your data in a structured, machine-readable format and transfer it to another controller.
Right to Object (Art. 21)
Object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent (Art. 7)
Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us through the contact form on our website. You may also withdraw Health Data consent at any time in Apple Health, Google Health Connect, your device settings, or the Elite11Plus app. We respond within one month.

9. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the supervisory authority:

UK: Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

10. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our platform:

Category
Purpose
Duration
Essential
Authentication, security, platform functionality
Session
Preferences
Remembering your settings and preferences
1 year
Analytics
Understanding how users interact with the platform
13 months

You can manage cookie preferences through your browser settings. Analytics cookies are only set with your consent.

11. Children's Data

Elite11Plus processes data about young football players on behalf of clubs and academies. We do not knowingly collect data directly from children under 13.

Clubs using our platform are responsible for:

  • Obtaining appropriate parental or guardian consent before adding minor players
  • Ensuring compliance with child protection and data protection laws in their jurisdiction
  • Only collecting data necessary for player development purposes

If you believe we have inadvertently collected data from a child without appropriate consent, please contact us immediately through the contact form on our website.

12. Automated Decision-Making

Elite11Plus uses AI algorithms to benchmark player performance data against position-specific and age-banded norms. This automated processing:

  • Generates percentile rankings and composite scores based on statistical models
  • Does not produce legal effects or similarly significant consequences for individuals
  • Is always accompanied by human review — coaches and analysts make final development decisions
  • Is based on explicit consent or the club's legitimate interest in player development

13. Third-Party Links and Services

Our platform may contain links to third-party websites (e.g., Hudl, GPS platforms). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before sharing data.

We use the following categories of service providers:

  • Cloud hosting and infrastructure
  • Payment processing
  • Email and communication services
  • Analytics and error monitoring
  • Customer support tools

All providers are vetted for GDPR compliance and bound by data processing agreements.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or platform functionality. Material changes will be notified via:

  • Email notification to registered account holders
  • Prominent notice on our website
  • In-platform notification where applicable

The "Last updated" date at the top of this page indicates when the policy was last revised.

15. Contact Us

For any privacy-related questions, data requests, consent withdrawal requests, or account deletion concerns, contact Elite11Plus at office@elite11plus.ai.

Elite11Plus is operated by Riedec Intelligence FZCO, Level 19, Sheikh Rashid Work Hub Sheikh Rashid Tower, Plot No. 3360301, DM Building Number 14 Dubai World Trade Center Complex, Dubai, United Arab Emirates.

Response time: We aim to respond within 5 business days. GDPR requests are handled within the statutory response period.